Check: GEN008460
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE:
GEN008460
(in versions v1 r14 through v1 r10)
Title
The system must have USB disabled unless needed. (Cat III impact)
Discussion
USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
Check Content
AIX has server USB drivers installed, such as keyboard, mount, and mass media drivers. Determine if the system has USB enabled. # lsdev -C | grep usb # lslpp -l | grep usb If usb filesets are installed on the system, USB is enabled and this is a finding.
Fix Text
Disable USB devices on the system. Use SMIT to remove the following filesets. devices.usbif.* # smitty remove
Additional Identifiers
Rule ID: SV-38833r1_rule
Vulnerability ID: V-22578
Group Title: GEN008460
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |